diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index 67ae30230..8bb37055b 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -2000,7 +2000,11 @@ Creating input Chains...
Beginning with Shorewall 4.4, when the Shorewall tarballs are
installed on a Debian (or derivative) system, the
/etc/init.d/shorewall file is the same as would be
- installed by the .deb.
+ installed by the .deb. The behavior of /etc/init.d/shorewall
+ stop is controlled by the setting of SAFESTOP in
+ /etc/default/shorewall. When set to 0 (the
+ default), the firewall is cleared; when set to 1, the firewall is placed
+ in a safe state.